Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.mft
File: 01Cgds5KjOb7afH9pKGUYUqUGvo.mft (raw, json)
Hash identifier: s+nOnO76AeBLX3Iy93RQobUIukTdixVBBf6bbwcqwH0=
Subject key identifier: 58:8D:D9:7C:BF:5E:A2:8A:9E:A9:03:7A:D9:41:57:BB:5B:B0:20:51
Authority key identifier: D3:50:A0:76:CE:4A:8C:E6:FB:69:F1:FD:A4:A1:94:61:4A:94:1A:FA
Certificate issuer: /CN=d350a076ce4a8ce6fb69f1fda4a194614a941afa
Certificate serial: 019E2C2812DD77C96E471842BF63AFDF7C26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01Cgds5KjOb7afH9pKGUYUqUGvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.mft
Manifest number: 190F
Signing time: Fri 15 May 2026 15:01:24 +0000
Manifest this update: Fri 15 May 2026 15:01:24 +0000
Manifest next update: Sat 16 May 2026 15:01:24 +0000
Files and hashes: 1: 01Cgds5KjOb7afH9pKGUYUqUGvo.crl (hash: LC1WvcF3SdQ+i1SI6LLKYD/3ResZXd8kE71HHWZhm9Q=)
2: EkysD1nuSYyDinbnDahfH-VyT0k.roa (hash: I2/OA/U368nOnLRCtdWjPsJgwSqvtccdxmLHw2kJW9Y=)
3: RbJbPNiBU0kAmqUheDo0szIBjek.roa (hash: CTVJkxKyBFMb7b5JJrpF23blu0aI0z8ZUdPB6VOt7qQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/01Cgds5KjOb7afH9pKGUYUqUGvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2c:28:12:dd:77:c9:6e:47:18:42:bf:63:af:df:7c:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d350a076ce4a8ce6fb69f1fda4a194614a941afa
Validity
Not Before: May 15 15:01:24 2026 GMT
Not After : May 16 15:01:24 2026 GMT
Subject: CN=588dd97cbf5ea28a9ea9037ad94157bb5bb02051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e9:81:18:fe:03:c9:7a:3f:89:48:b3:ff:20:
41:62:07:b7:75:61:b4:18:ff:23:24:a4:34:47:2c:
5e:49:33:e7:79:30:a9:dd:60:3e:83:99:55:df:a5:
18:df:40:34:12:44:9a:e1:e0:17:eb:63:9d:a9:79:
fe:05:88:1f:9d:54:fd:67:6e:c2:1b:ca:0d:9b:8e:
6a:0e:91:ba:fa:8f:24:d0:3c:81:ed:2a:20:d4:10:
f6:26:45:f2:11:3e:5b:aa:6a:03:1a:22:4e:bf:4d:
02:dd:da:a4:1e:0e:dc:02:ef:f0:2a:5d:79:4d:56:
a2:77:82:6d:12:06:9a:84:34:1e:86:f0:07:34:30:
19:17:ac:3a:b2:e5:8d:5b:6d:0f:62:ce:1c:07:85:
b0:aa:78:4d:86:57:16:f9:7a:12:fc:21:aa:b5:65:
8f:90:2f:33:be:61:13:4d:06:e2:38:14:64:67:a4:
96:07:5d:87:7d:f5:ae:3f:34:1d:66:c2:0e:cd:88:
b9:be:60:9b:47:5a:02:4d:a0:5c:d5:c9:ea:16:84:
19:6b:50:45:94:82:2c:62:46:ae:8d:c8:47:9e:09:
17:68:ad:d9:0f:3e:96:85:4d:75:9c:ce:46:7b:46:
e3:55:59:0d:3d:64:91:7d:a0:5f:da:28:37:c4:0b:
f7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:8D:D9:7C:BF:5E:A2:8A:9E:A9:03:7A:D9:41:57:BB:5B:B0:20:51
X509v3 Authority Key Identifier:
keyid:D3:50:A0:76:CE:4A:8C:E6:FB:69:F1:FD:A4:A1:94:61:4A:94:1A:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01Cgds5KjOb7afH9pKGUYUqUGvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:ec:c0:10:c8:90:8c:bb:fd:a2:e2:99:6c:3a:b4:4e:de:28:
28:58:be:16:eb:c3:e1:42:59:c7:11:a6:ab:54:dd:74:bd:d2:
eb:1c:15:db:e4:33:fc:b4:79:1d:7a:86:26:58:05:95:e4:ef:
18:11:f5:c9:70:11:13:94:a0:8a:7c:d6:d6:84:50:9c:18:b2:
6b:14:1a:ff:58:d4:bf:00:c4:6b:32:46:4b:ad:4b:35:72:85:
56:10:80:ea:71:a4:22:9d:1f:f1:60:24:b0:48:43:41:df:cb:
c9:b6:96:2e:36:95:7e:b2:e1:1f:18:9a:70:5a:d4:b4:db:89:
3f:cb:6a:eb:50:d1:6e:98:1c:2e:be:1f:b6:0c:f5:13:eb:9e:
de:74:f4:cb:bb:27:74:48:7b:d7:95:d1:8f:b9:5f:a8:2d:02:
be:ee:9c:b4:58:c0:4b:08:19:89:28:76:87:92:d9:fd:36:45:
51:6b:97:28:69:ed:fb:6e:d0:12:94:20:1c:a9:ae:10:bc:91:
4f:c2:db:65:10:6c:4e:1f:d5:5f:fd:aa:01:c7:95:fe:2a:51:
7b:ae:8b:13:44:e8:e3:c1:cb:84:da:16:0b:be:be:bf:f4:de:
a0:ee:99:c2:63:c3:26:92:e8:72:39:51:82:59:66:2b:89:53:
e5:ff:1a:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4sKBLdd8luRxhCv2Ov33wmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNTBhMDc2Y2U0YThjZTZmYjY5ZjFmZGE0YTE5NDYxNGE5
NDFhZmEwHhcNMjYwNTE1MTUwMTI0WhcNMjYwNTE2MTUwMTI0WjAzMTEwLwYDVQQD
Eyg1ODhkZDk3Y2JmNWVhMjhhOWVhOTAzN2FkOTQxNTdiYjViYjAyMDUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+mBGP4DyXo/iUiz/yBBYge3dWG0
GP8jJKQ0RyxeSTPneTCp3WA+g5lV36UY30A0EkSa4eAX62OdqXn+BYgfnVT9Z27C
G8oNm45qDpG6+o8k0DyB7Sog1BD2JkXyET5bqmoDGiJOv00C3dqkHg7cAu/wKl15
TVaid4JtEgaahDQehvAHNDAZF6w6suWNW20PYs4cB4WwqnhNhlcW+XoS/CGqtWWP
kC8zvmETTQbiOBRkZ6SWB12HffWuPzQdZsIOzYi5vmCbR1oCTaBc1cnqFoQZa1BF
lIIsYkaujchHngkXaK3ZDz6WhU11nM5Ge0bjVVkNPWSRfaBf2ig3xAv3IwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFiN2Xy/XqKKnqkDetlBV7tbsCBRMB8GA1UdIwQY
MBaAFNNQoHbOSozm+2nx/aShlGFKlBr6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDFDZ2RzNUtqT2I3YWZIOXBLR1VZVXFVR3ZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8zY2FjNmItMmMyYS00YjY2LWFkZWUt
ZDUyMzI1ZGU2YjA4LzEvMDFDZ2RzNUtqT2I3YWZIOXBLR1VZVXFVR3ZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi8zY2FjNmItMmMyYS00YjY2LWFkZWUtZDUyMzI1ZGU2YjA4
LzEvMDFDZ2RzNUtqT2I3YWZIOXBLR1VZVXFVR3ZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfOzAEMiQ
jLv9ouKZbDq0Tt4oKFi+FuvD4UJZxxGmq1TddL3S6xwV2+Qz/LR5HXqGJlgFleTv
GBH1yXARE5SginzW1oRQnBiyaxQa/1jUvwDEazJGS61LNXKFVhCA6nGkIp0f8WAk
sEhDQd/LybaWLjaVfrLhHxiacFrUtNuJP8tq61DRbpgcLr4ftgz1E+ue3nT0y7sn
dEh715XRj7lfqC0Cvu6ctFjASwgZiSh2h5LZ/TZFUWuXKGnt+27QEpQgHKmuELyR
T8LbZRBsTh/VX/2qAceV/ipRe66LE0To48HLhNoWC76+v/TeoO6ZwmPDJpLocjlR
gllmK4lT5f8aMg==
-----END CERTIFICATE-----
Generated at Fri May 15 17:46:45 2026 by rpki-client